Entanglement Swapping of Generalized Cat States and Secret Sharing 
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We introduce generalized cat states for d-level systems and obtain concise formulas for their en- 
tanglement swapping with generalized Bell states. We then use this to provide both a generalization 
to the d-level case and a transparent proof of validity for an already proposed protocol of secret 
sharing based on entanglement swapping. 
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I. INTRODUCTION 

There are numerous uses of spatially separated entan- 
gled pairs of partides such as quantum key distribution 
and secret sharing U [|, [|, || , teleportation || , su- 
perdense coding jg] , and chcating bit commitment M, . 
It has been argued that three or more spatially separated 
partides in an cntangled state (such as a GHZ or cat state 
[O , |Ï2| , |Ï3| , |ï^| ) may have similar or even broader appli- 
cations. It is first essential to distinguish between GHZ 
states and cat states. By an n-party cat state, we mean 
a highly entangled state of n partides, while by a GHZ 
state we mean one, which contradicts an interpretation in 
terms of any local hidden variable theory. Constructing 
the latter types of states for general multi-level multi- 
particle systems is quite a dimcult task, although some 
general criteria have been outlined for their identifica- 
tion [pTsl - On the other hand we will show that one can 
easily define n-party cat states with nice properties (i.e: 
entanglement swapping) which allows them to be used 
in a secret sharing protocol and possibly in many other 
communication protocols, although they may not be used 
for testing non-locality properties of quantum mechanics. 
More recently, applications such as reducing communica- 
tion complexity |Ï6[ p~7| quantum telecomputation [fÏ8|, 
and networked cryptographic conferencing [ Ï9[ |2~l·|^22|] 
have also been suggested as possible new applications of 
these multi-particle entangled states. 

For practical applications such as mentioned above, 
there has been much interest in manipulating entangled 
states of many partides [^3[ |24|, 25 
it has been shown that by appropriate 



In particular 
Bell measure- 

ments, entanglement can be swapped between different 
partides 23 , a scheme which has been generalized to 
multi particle case in ^(|. In fact to the question of 
"Which partides get entangled when we make cat state 
measurement on a group of partides?" , there is a general 



pencil and paper rule which provides the answer p6[ . 
One just has to connect the partides being measured to 
frame a polygon and those not being measured to frame 
a complementary polygon. These two polygons represent 
the two multi-particle cat states obtained after the ma- 
nipulation. However for most applications it is highly 
necessary to know exactly the type (e.g. the labels) of 
the cat state that the partides are forming and a knowl- 
edge of only the partides sharing the entanglement is 
not enough. In fact in almost any of the communication 
protocols mentioned above, the information to be trans- 
ferred is encoded in the type of the labels of the cat states 
involved. For this reason one needs also a simple pencil 
and paper rule for determining the types and the labels 
of the cat states involved in a swapping process. 

It may not be so illuminating to derive a general for- 
mula for such a purposc, although it is rather straight- 
forward to do so. However if we restrict to the most 
common type of swapping, that is, the swapping of a cat 
state and a Bell state, then transparent, graphical and 
very useful rules can be derived as we will show below. 
Furthermore we will derive the rules for general d-level 
systems. We will then apply these rules to the quantum 
key distribution and secret sharing protocols of |J and 
show that the rules of encoding and decoding of this pro- 
tocol, expressed otherwise only in tables, even when few 
parties are involved Q can be neatly expressed by closed 
formulas in the general case. 

The structure of this paper is as follows. In section 2 
we review the bàsic properties of cí-level Bell states p7L 
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derive simple graphical rules for entanglement swapping 
of cí-level Bell and cat states. We then apply in section 
4, these rules to the secret sharing protocol of Cabello Q| 
to see how simple the encoding and decoding rules of this 
protocol are. We conclude the paper with a discussion. 



II. GENERALIZED CAT STATES FOR d-LEVEL 
SYSTEMS 

In studying cí-level states and their entanglement prop- 
erties we are following an interesting trend to general- 
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ize the well known quantum algorithms and protocols of 
quantum computation and communication to non-binary 
systems, like quantum gates for qudits |Ü|, quantum er- 
ror correcting codes [BÏJ |32], and generalization of the 
BB84 protocol (3j| for quantum key distribution||. (For 
a review on quantum key distribution see 

In fact considerations of quantum hardware may bring 
about some advantage to non-binary systems, since big- 
ger Hilbert spaces can be made by coupling fewer d- 
dimensional systems than 2-dimensional ones, and it is 
well known that completo coupling of quantum bits gets 
much more difHcult with the number of qubits increas- 
ing. Some researchers have even considered quantum 
computation and communication with continuous vari- 
ables J3^, |3(J. Besides these, it is very instructive to 
study quantum computation and communication for d- 
level systems (qudits) to understand them in a general 
dimension-free setting. 

We start by reviewing a generalization of the familiar 
Bell states for qudits introduced in |27|, |2S| |. These 
are a set of d 2 maximally entangled states which form 
an orthonormal basis for the space of two qudits. Their 
explicit forms are: 



d-l 
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where Ç — e 2 ^ and u\ and u 2 run from to d — 1. Each 
Bell state is thus characterized by a pair of two Zd labels. 
For d = 2 these states reduce to the familar Bell states, 
usually denoted by | x I /± ) and l'í'*). One can also expand 
any computational basis vector in terms of Bell states: 



1 d-l 

IÍ,*> = ^£C iu |*(«,*-j)>. 



(2) 



It is also useful to consider a generalization of the familiar 
Hadamard gate to the d-level case. It is defined J|7], Q 
as follows: 



H = 



1 

Td 
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(3) 



This operator is really not new and it is known as the 
quantum fourier transform when d — 2 n . In that case 
it acts on n qubits. Here we are assuming it to be a 
bàsic gate on one single qudit, in the same way that the 
ordinary Hadamard gate is a bàsic gate on one qubit. It 
is also useful to generalize the NOT and the CNOT gates. 
We note that in the context of qubits, the NOT gate, is 
basically a mod-2 adder. For qudits this operator gives 
way to a mod-cï adder, or a Right-Shift gate. 



= \j + l)modd, 



(4) 



where here and hereafter all our additions are defined 
mod d. Note that R d = /, compared to NOT 2 = I. 



For any unitary operator U ', the controlled operator U c 
is naturally generalized as follows: 



U c (\i) ® = |*> ® 17*13) 



(5) 



Here the first and the second qudits are respectively the 
controller and the target qudits. In particular the con- 
trolled shift gates which play the role of CNOT gate, act 
as follows: 



Rc\i,j) = + i) 



(6) 



Equippcd with the <i-level Hadamard and CNOT (R c ) 
gates, one can construct <i-level cat states simply as in 
the 2-level case by the circuit shown in fig. ([[]), where 
\ui,U2, • • • , u n ) is a computational basis vector, in which 
Ui e {0,1,2,- •• ,d- 1}. 

The resulting cat state will be: 
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These states are orthonormal, 

• • • ,v n )\^(ui, ■ ■ ■ ,u„)) = S UuVl ■ ■ ■ S UntVn and 
complete: any computational basis vector can be 
expanded in terms of these generalized cat states: 

\U!,U 2 ,U 3 , ■••,!!„> = 

^ d-l 

^£-j«i|#(j )lt2 _ Ul)tí3 _ Ul) ... , nn - Ul )), (8) 
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Quite analogously to the 2-level case, one can generate a 
cat state of n partides from a cat state of n — 1 partides 
in two ways, either using Zeilinger et. al. method [ p5[ , 
that is: acting by an R c gate on one particle of the (n — 
l)-cat state and one qudit of a Bell state, subsequently 
measuring the target qudit, or by using the method of ||(| 
by performing a Bell state measurement on two partides, 
one from an (n — l)-cat state and the other from a 3-cat 
state, projecting the rest onto an n-cat state. 



III. SOME SIMPLE RULES FOR 
ENTANGLEMENT SWAPPING 

Entanglement swapping is nothing but tensor multi- 
plying two cat states, expanding them in the compu- 
tational basis of the product space, swapping a subset 
of partides and then re-expanding the resulting state in 
terms of the new cat states. The idea and the essential 
calculation is best illustrated by the simplest example, 
that is, swapping two Bell states. Suppose partides 1 
and 2 are in a Bell state \^f(ui,U2)) 12 and partides 3 
and 4 are in a Bell state ^(fi, V2}) 3 A - This state of the 
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> |*(ui ! M 2 ,··· ! «n)) 



FIG. 1: Circuit for constructing d-level cat states. 



Ui u 2 u 3 u n 
FIG. 2: Visualization of |\P(ui,U2, ■ ■ ■ ,u n )) cat state. 

four partides is equal to: 

1 Ç ^«x+i'i* | Í5j - + U2 ) 1:2 \j',f + V 2 ) 3A = 

lj2C jul+j ' Vl \j,f + «a> M li',j + «a>,, a = 

J_ £ ( M+/« ir JHV| $(ï , ]j / + V2 _ 4 

,w,w' 

\*(w',j + u 2 -f)) 3:2 (9) 

Changing the variables (j' — j —> £), and using the iden- 

tity 5 Sj=o C' 7 ™ — 5(^)0)) an d rearranging terms we fi- 
nally arrive at: 

~ E C~ M |*(«i + fe, v 2 + 0> M |#(«i - fe, «a - 0>s,, (10) 
M 

It is customary to represent a cat state by a polygon. 
However a cat state is not symmetric and a polygon can 
not represent it properly. In fact as it is clear from ^ that 
a cat state is symmetric under the interchange of both 
the labels and the partides from 2 to n, i.e: 

• • • , Uk, ■ ■ ■ , «2, • • • , Un))l,-.. ,k,- ,h- ,n 
= \W(Ux,--- ,Ui,--- ,U k ,--- ,Un)) lr . fc _... „ (11) 

however it has no such symmetry under the interchange 
of the first particle with another one. We therefore depict 
a cat state by a line with n nodes on it, distinguishing 
the first node from the others by by assigning a black 
circle to it compared with empty circles assigned to others 
(fig. (0)). With this convention, the result of swapping 
calculated in equation || can be depicted as in fig. (^), 
where we have ignored the coefficients of the expansion 
and the arrow is meant to imply that the right hand side 
is a possible outeome of the Bell measurement performed 
on the left hand side partides designated by dashed line. 
The simple rule is that the sum of labels on the black 
nodes and white nodes are conserved separately in such 
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FIG. 3: Entanglement swapping of d-level Bell states. 

a swapping. We will see that this type of rule will also 
hold true with slight modifications in swapping of Bell 
states and cat states. 

We now derive formulas for swapping Bell states and 
cat states. We distinguish two cases, one in which a 
Bell state measurement involves the first particle (the 
black node) of the cat state and one in which it does 
not. For the first case we find after some straightforward 
calculations: 

\^( Ul ,u 2 ,--- ,it„)) M ,..., n ® \*(v,v')) sa , = 
~ C~'*l*(« + k,u 2 -Í,u 3 -£,■■■ ,u n - Í)) S:2i3Ai ... ,„ (8 

k,t 

|*(tti-*,t/ + *)>!,., (12) 

This formula is depicted graphically in fig. (Q-a). Again 
we see a simple rule in terms of the conservation of the 
labels on the black and white nodes. For the second case 
where the Bell state measurement does not involve the 
black node of the cat state we find: 

^(ui.tta,-" ,%)) M , 3 ,.,„ ® «')).,.» = 

-5^C~ tt |*(«l + *.U2,lÍ3,··· ,v' +£,■■■ ,ttn)) 1A ... ,.,,...,„ ® 
k,t 

\^(v-k,u m -£)) s m (13) 

This is depicted in fig. (|]-b). 

IV. SECRET KEY SHARING BY 
ENTANGLEMENT SWAPPING 

Among the many applications of entanglement swap- 
ping mentioncd in the introduction, in this section we 
consider the secret key sharing protocol proposed by Ca- 
bello in (2[ ||. In this protocol n members of a group 
want to agree upon a secret key (For n = 2, we have 
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(a) (b) 
FIG. 4: Entanglement swapping between a cat state and a Bell state 



the simple QKD scheme). The key is to be such that 
no proper subset of the group can determine it and its 
determination requires the cooperation of all members 
of the group. In the protocol proposed by Cabello 
the n members of the group share an n-cat state, and 
each of them has also a Bell state. Each of the mem- 
bers swaps her or his Bell state with the cat state, and 
then all of them send the resulting cat state to one of 
the members say Alice, who measures the cat state and 
announces the result of her measurcmcnt in públic. It 
is then argued that by using this knowledge and the re- 
sult of their own Bell measurements, the members of the 
group can all determine the result of the Bell measure- 
ment of Alice, which is to act as a random two bit key. 
In [Q , it is shown by way of a couple of examples for 3 
and 4 parties and compiling the results of measurements 
in tables, that this is indeed possible. Here we general- 
ize the results of Q in two respects. First we consider 
general d-level systems instead of two level ones, second 
by using our simple rules for entanglement swapping we 
derive general and concise formulas for determining the 
final secret key in terms of measurements of individu- 
als members. As mentioned above, we can carry out all 
of the analysis graphically, where by our graphics we not 
only imply the partides which get entangled under swap- 
ping but also indicate precisely the entangled states they 
form in this process. The first stage of the process is de- 
picted in fig. (|)-a), where each member (i), has a Bell 
state (ví,v!^) and all the members share also a cat state 
(ui,ií2, • • • ,u n ). When the first member whom we call 



Alice, pcrforms her Bell measurement the entanglement 
swaps to the form shown in fig. (^-b), where we have 
used the first rule of fig. (Q-a). Subsequently members 
numbered 2, 3, ... and n perform their Bell measurement 
and the states swap to that of fig. (||-c). The random 
two dit key is the pair of labels of Alice's Bell state, that 
is (ui — k\ , v[ + 1\) . At this stage the cat state is sent to 
Alice, she measures the state and announces the labels 



(vi + kx + k 2 + ■ ■ ■ + k n ,v' 2 + h,v' 3 + £3, 



In) Of 



this state in públic. It is now clear that each member of 
the group say the i-th one, (i = 2, 3, • • ■ , n), knowing his 
own Bell state (i>í,ï4) at the beginning of the protocol, 
his final Bell state (ví — ki,Ui — í\ — li) and the pub- 
licly announced cat state, can independently determine 
l\ and hence the second label of the secret key, v[ + í\ . 
(Note that the shared cat state labels and all the Bell 
labels including those of Alice {v\ , v[ ) are assumcd to be 
known to all the members at the beginning of the proto- 
col) . However to determine the first label of the key, that 
is «i — fei, the members need a knowledge of fci, which no 
subset of the group can determine independently. It can 
only be found by sharing their vàlues of fci, i = 2, 3, • • • , n 
with each other. Once this is done all members can de- 
termine the value of k\ from the publicly announced label 
of Alice v\ + fci + &2 + • • • + k n . 

The way we have presented this protocol, which starts 
with general Cat and Bell states, rather than with special 
ones with say all the labels being zero (i.e. $(0,0))), 
has the advantage that it shows how the encoding and 
decoding scheme works for consecutive qudits, when the 
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same Bell and Cat states are re-used. To compare our 
results with those of Q , it is enough to set all the original 
labels UíjVíjvI = 0. It is then easy to see from fig. (||) 
that our results completely match the tables presented 
in that article. 



V. DISCUSSION 

We have provided closed formulas for entanglement 
swapping of cí-level cat states and Bell states. We have 



then used our formulas for providing transparent proof 
for the validity of a secret sharing protocol between n 
parties based on entanglement swapping. We expect that 
our graphical method of representing cat states and our 
formulas for entanglement swapping (ES) may find ap- 
plications in every ES-based protocol in quantum com- 
munication. 
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